I have been able to confirm that SUPERAntiSpyware
can now be installed and updated successfully in Safe Mode with networking
(and there is now no need to have to do this with Windows running in normal mode). So let's continue with Windows running in Safe Mode with networking
If not already running, then start the computer and load Windows in Safe Mode with networking
Firstly, you should disable any real-time anti-malware software so that it does not interfere with rkill
: If you are not sure about what needs to be disabled, or how to go about disabling it, please refer to the following link to post #3
:How to Temporarily Disable your Anti-malware Scanners
Double-click on rkill
on your desktop to run it. (If you are using Windows Vista, please right-click on rkill and select Run As Administrator)
- A black screen will appear and then disappear: That is normal. It means that the tool has been successfully executed.
- When finished it will display a log file that shows the processes that were terminated while the program was running.
- You may copy/paste the log contents in your next post, or simply close the log file.
If nothing happens or if the tool does not run, try running another version of rkill.
If you continue having problems running rkill, you can download iExplore.exe, eXplorer.exe, uSeRiNiT.exe or WiNlOgOn.exe, which are renamed copies of rkill.com, and try them instead.
Please let me know if you cannot get rkill to run successfully at all.
For more information about rkill
, see the following link:RKill - What it does and What it Doesn't - A brief introduction to the programDo not reboot your computer after running rkill as the malware programs will start again.
If rebooting is required, then run rkill again.
Now install SUPERAntiSpyware, update the database and scan.
- Double-click SUPERAntiSpyware.exe and use the default settings for installation.
- An icon will be created on your desktop. Double-click that icon to launch the program.
- If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
- In the Main Menu, click the Preferences... button.
- Click the Scanning Control tab.
- Under Scanner Options make sure the following are checked (leave all others unchecked):
- Close browsers before scanning.
- Scan for tracking cookies.
- Terminate memory threats before quarantining.
- Click the "Close" button to leave the control center screen.
- Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
- On the left, make sure that C:\Fixed Drive is checked, as well as any other drives that you wish to scan.
- On the right, under "Complete Scan", choose Perform Complete Scan.
- Click "Next" to start the scan. Please be patient while it scans your computer.
- After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
- Make sure everything has a checkmark next to it and click "Next".
- A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
- If asked if you want to reboot, click "Yes" and reboot normally (NOT into Safe Mode).
Even if you are not asked, reboot normally (NOT into Safe Mode) to properly remove any malware.
To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Close to exit the program.
- Click Preferences, then click the Statistics/Logs tab.
- Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
- If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
- Please copy and paste the Scan Log results in your next reply.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner
instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.
Please post the log(s) and let us know how the system is running now when starting Windows normally.